CVE-2025-57324: 
JavaScript vulnerability analysis and mitigation

A Prototype Pollution vulnerability exists in the SingleInstanceStateController.initializeState function of parse version 5.3.0 and before. The vulnerability allows attackers to inject properties on Object.prototype via supplying a crafted payload, which can lead to denial of service (DoS) as the minimum consequence (NVD).

The vulnerability is classified as CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes - 'Prototype Pollution'). The CVSS v3.1 base score is 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating that the vulnerability requires low privilege access and can be exploited over the network (NVD).

The vulnerability primarily affects the availability of the system through denial of service (DoS) attacks. When successfully exploited, attackers can inject properties on Object.prototype, which can disrupt normal application functionality (NVD).

Users should upgrade to a version newer than 5.3.0 to address this vulnerability. No specific workarounds have been documented for users who cannot upgrade immediately (NVD).